Fajar A. Nugraha wrote: > Helmut Schneider wrote: > >>> seems that the clamav Port (0.67-1) has problems with RAR Files >>> (e.g. >>> Bagle.N): >> >> To avoid missunderstandings, I know the file is pwd, but clamav does >> not recognize the virus within the archive (maybe a DB problem)... >> > Sometimes the signatures were created using the complete mail, so > clamscan won't recognize the attachment alone but it will recognize > the complete mail. > > If you use clamscan, you can work around RAR errors using > --unrar[=FULLPATH] Enable support for .rar files > > But since the RARs are password-protected, it's useless. > My suggestion is try feeding the complete virus mail to clamscan > (instead of just the attachment), and see if it works.
Thats the point, if clamav would have detected the virus in the original mail I wouldn't have posted here... :) ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users